VCC AML/CFT under MAS Notice SFA 04-N02 — Step-by-step walkthrough

by | Jun 25, 2026 | Governance and Compliance

VCC AML/CFT under MAS Notice SFA 04-N02 — Step-by-step walkthrough

VCC AML/CFT under MAS Notice SFA 04-N02 sets out the anti-money-laundering and countering-the-financing-of-terrorism duties that a Variable Capital Company’s appointed fund manager must discharge, covering customer due diligence, ongoing monitoring, suspicious-transaction reporting and record-keeping. The notice applies through the VCC’s MAS-licensed manager, not the VCC directly.

Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.

What MAS Notice SFA 04-N02 requires — vcc aml/cft under mas notice sfa 04-n02

A Variable Capital Company (VCC) must appoint a MAS-regulated fund manager, and it is that manager who carries the AML/CFT obligations on the VCC’s behalf. MAS Notice SFA 04-N02 (issued to capital markets services licence holders and related persons) requires the manager to assess money-laundering and terrorism-financing risk, perform customer due diligence (CDD) on the VCC’s investors, monitor transactions on an ongoing basis, screen against relevant sanctions and watchlists, file suspicious transaction reports, and retain records for at least five years.

The framework is risk-based: higher-risk investors and structures attract enhanced due diligence, while lower-risk relationships may follow simplified measures within the limits the notice allows.

For more on this on our site, see VCC AML/CFT under MAS Notice SFA 04-N02 — Complete 2026 guide.

Who it applies to

The duties bind the VCC’s appointed fund manager and its officers, including the AML/CFT compliance function. Directors of the VCC should nonetheless understand the regime, because Section 17 of the Variable Capital Companies Act 2018 frames the role of directors, and governance failures around financial crime expose the structure to regulatory action. Service providers conducting CDD on behalf of the manager remain subject to the manager’s oversight.

Always confirm the current rules with the authoritative source: ACRA, the Monetary Authority of Singapore, Singapore Statutes Online.

Core obligations and the numbers

Key operational requirements include: identifying and verifying each investor and the beneficial owners behind them before or during onboarding; conducting enhanced due diligence for politically exposed persons and higher-risk jurisdictions; screening at onboarding and periodically thereafter; and keeping CDD and transaction records for a minimum of five years after the relationship ends. The manager must also appoint an AML/CFT compliance officer and provide staff training.

Step-by-step compliance walkthrough

A workable sequence is: (1) document a risk assessment of the VCC and its investor base; (2) set CDD and enhanced-due-diligence procedures; (3) screen investors and beneficial owners at onboarding; (4) monitor transactions and refresh CDD on a risk-sensitive cycle; (5) escalate and file suspicious transaction reports where warranted; and (6) retain records for at least five years. The manager should review the programme periodically and after any material change.

Common mistakes and gotchas

The most common failing is treating the VCC as if it carries the obligations itself, when the duty rests with the licensed manager. Others include weak beneficial-ownership verification, screening only at onboarding rather than periodically, and inadequate record retention. Outsourcing CDD without retaining oversight is a recurring supervisory concern.

Building a practical AML/CFT programme

A workable programme translates the notice into day-to-day practice. That means a written enterprise risk assessment refreshed at least annually; clear onboarding procedures that capture identity, beneficial ownership and source of funds; defined triggers for enhanced due diligence; ongoing transaction monitoring proportionate to risk; and a named compliance officer with authority to file suspicious transaction reports. Staff training and an independent periodic review close the loop.

For a VCC, the manager should document how responsibilities are split between itself and any administrator or service provider performing CDD, while retaining ultimate oversight.

Sanctions screening and ongoing monitoring

Screening is not a one-off onboarding step. Investors and their beneficial owners should be screened against applicable sanctions and watchlists at onboarding and periodically thereafter, and the programme should react promptly to new listings. Ongoing monitoring looks for activity inconsistent with what the manager knows of the investor, escalating anomalies for review. Weak periodic screening and a failure to refresh customer due diligence on a risk-sensitive cycle are among the issues supervisors most frequently raise.

Related guides

FAQs

Who is responsible for VCC AML/CFT?
The VCC’s appointed MAS-regulated fund manager, which discharges the obligations under MAS Notice SFA 04-N02 on the VCC’s behalf.

How long must records be kept?
At least five years after the end of the business relationship or the completion of the transaction.

Does the notice require enhanced due diligence?
Yes, for higher-risk situations such as politically exposed persons and higher-risk jurisdictions.

Is this legal advice?
No. This is general information; AML/CFT obligations should be confirmed with the VCC’s licensed manager and compliance advisers.

Need help with this? Call, SMS or WhatsApp +65 8501 7133, or email hello@rafflescorporateservices.com. Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.